Struct rusoto_route53::CreateKeySigningKeyRequest

pub struct CreateKeySigningKeyRequest {
    pub caller_reference: String,
    pub hosted_zone_id: String,
    pub key_management_service_arn: String,
    pub name: String,
    pub status: String,
}

Fields

caller_reference: String

A unique string that identifies the request.

hosted_zone_id: String

The unique string (ID) used to identify a hosted zone.

key_management_service_arn: String

The Amazon resource name (ARN) for a customer managed key (CMK) in AWS Key Management Service (KMS). The KeyManagementServiceArn must be unique for each key signing key (KSK) in a single hosted zone. To see an example of KeyManagementServiceArn that grants the correct permissions for DNSSEC, scroll down to Example.

You must configure the CMK as follows:

Status

Enabled

Key spec

ECC_NIST_P256

Key usage

Sign and verify

Key policy

The key policy must give permission for the following actions:

• DescribeKey

• GetPublicKey

• Sign

The key policy must also include the Amazon Route 53 service in the principal for your account. Specify the following:

• "Service": "api-service.dnssec.route53.aws.internal"

For more information about working with CMK in KMS, see AWS Key Management Service concepts.

name: String

An alphanumeric string used to identify a key signing key (KSK). Name must be unique for each key signing key in the same hosted zone.

status: String

A string specifying the initial status of the key signing key (KSK). You can set the value to ACTIVE or INACTIVE.

Trait Implementations

impl Clone for CreateKeySigningKeyRequest

pub fn clone(&self) -> CreateKeySigningKeyRequest

Returns a copy of the value.

pub fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CreateKeySigningKeyRequest

pub fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CreateKeySigningKeyRequest

pub fn default() -> CreateKeySigningKeyRequest

Returns the "default value" for a type.

impl PartialEq<CreateKeySigningKeyRequest> for CreateKeySigningKeyRequest

pub fn eq(&self, other: &CreateKeySigningKeyRequest) -> bool

This method tests for self and other values to be equal, and is used by ==.

pub fn ne(&self, other: &CreateKeySigningKeyRequest) -> bool

This method tests for !=.

impl StructuralPartialEq for CreateKeySigningKeyRequest